Question: What is the significance of the numbers in a carved file's name?

Answer:A carved file, by definition, is a file that is not recorded in the file system records but can found within another data stream. Carved files do not have names or metadata, so FTK assigns its own names.

FTK 2 and later:

FTK 2 and later assign names like "Carved[xxxxx].jpg".The number within the brackets is the byte decimal offset count from the first byte of the parent file from which the file was carved.

Interpretation: The carved file was found beginning at decimal byte offset 789 within "MyFile.doc".

FTK 1:

FTK 1 assigns names like "AAA_xxxxx[yyyyy].bmp".AAA is the file type/extension. xxxxx is the byte decimal offset count from the first byte of the parent file from which the file was carved. yyyyy is the parent file's item number.